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In the Claims : 

Amend the claims as follows: 



1 . (Currently amended) Me^feed A method for secure forwarding 
of a message from a first computer to a second computer via 
an intermediate computer in a telecommunication network, « 
-» i raotoria e-d; — fey c omprising: 

a) forming a message in the first computer or in a computer 
that is served by the first computer, and in the latter 
case sending the message to the first computer, 

b) in the first computer, forming a secure message by giving 
the message a unique Identity and a destination address, 

c) sending the secure mesf^age from the first computer to the 
intermediate computer, 

d) using said destination address and the unique identity 
to find an address to the second computer, 

e) substituting the current destination address with the 
found address to the second computer, 

f) substituting the unique identity with another unique 
identity, and 

g) forwarding the secure message with substituted current 
destination address and substituted unique identity to the 
second computer . 

2. (Currently amended) Mothod of claim 1, charaotori 
- c d in thiit T he method o f claim 1 wherein the method 
f urther comprises forming the secure message io formed in 
step b) by using an IPSec connection between the first 
computer and the second computer-gog mcd for this purpono in 

3, (Currently amended) Mothod of claim 1, characto 
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^,-^2 d in that The method of claim 1 wherein t he method 
furt her comprises TDerformina a %he secure forwarding of the 
message io porfogeaed by making use of t-fee — SSL or TLS 
protocols - 

4. (Currently amended) M oL hod of claini 2, c h a r a c t e-~^^ 
E g d in that The method of claim 2 wherein the method 
fur ther comprises manually oerformincr a preceding 
distribution of keys to %^-components for forming the 
IP53ec connection-^ar^ pcrforrnQd manually . 

5. (Currently amended) M&felted of claim 2, o h a ^E^^r-e- t o; r -ar 
E c d in th at Th e method of claim 2 wherein the meth od 
further comprises performing a preceding distribution of 
keys for forming the IPSec connection -i^- performed by an 
automated key exchange protocol. 

6. (Currently amended) Method of claim 5»v o h a ••^^-a-e- t c. r --^ 
g-^- d in- that The method of claim 5 wh erein the method 
fu rther comprises performing the automated key exchange 
protocol used for the preceding distribution of keys: for 
forming the IP Sec connection ic performe d by means of a 
modified IKE key exchange protocol between the first 
computer and the intermediate computer and by means of a 
standard IKE key exchange protocol between the intermediate 
computer and the second computer. 

7. (Currently amended) Method of any of claimo 2, 5 or 6,- c h 
aractcri-Cfjin th=^ The method of claim 2 wherei n 
t he method further comprises sending the message that is 
sent from the first computer in step c) 4e as a packet ^kd 
that contains message data, an inner IP header containing 
the actual sender and receiver addresses, an outer IP 
header containing the addresses of the first computer and 
the intermediate computer, the unique identit y, and other 
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8- (Cxirrently amended) Mothod of any of - olaimc 2 -,— §-^--&7 — 
a ractcriLc r ii n thn^ The method of claim 1 wherein 
tho method further comprises that the iPSec conrxectioii is 
be:-nq' one or more security associations (SA) and the unique 
identity i'S being one or more SPI values and — tfee — &ifeet 
^se^ mrity param e toriJ inoludo one or moro — se qucnco numbeit ^ - 

9- (Currently axuended) 

t o r - i g o d in that The method of claim 1 wherein! the 
me-hod further compr i ses performin g the matching in step d) 
■arS- pcrforffleet by using a translation tstble stored at j the 
intermediate computer - 



10^ (Currently amended) Method of any of claimc 1 9^-^ 

ractcrize^in ^>^=>^ The method of claim 1 wher ein 
th^ju ethod f urther comprises changing both the address: and 
the SPI -value e- ro chan ged by the intermediate computer in 
steps e) roGpcetivo and f ) . 

1 1 , (Currently amended) Me^hedr-^- any of elaimo 1 ^^- c^ h a 

ff_.^,^^.-e~-g^ E o d - in that The m ethod of claim 1 where in 
th e method further comprises the first computer is bein g a 
mobile termina l; whereby s o that the mobility is enabled by 
modifying the translation table at the intermediate 
computer. 

12. (Currently amended) Mothod of claim 11, aharactor 
i - c d in th?^ The method o f claim 11 wherein th e method 
fiir-fhg_r com prises performing the oaid modification of the 
translation tables in porformod b y sending a request for 
registration of the new address from the first computer to 
the intermediate computer- 
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13. (Currently amended) Method of claim ^2, oharaolbo 
r c c d in thnf The method of claim 12 wherein the method 
further comprises sending a reply to oaid the request for 
recjistration ia oont - from the intermediate computer to^ the 
first computer - 

14. (Currently amended) M ethod Q f clai - Ri 12 or 13, c h a r= a o 

r i g Q d^-a:^— t-^^ The method of claim 12 wherein the 
metihod further comprises authenticating or encrypting by 
IP3ec the request for registration and/or reply- is 
a^ar bhontioatod and/or - oncryptod by -JgSee, 

15. (Currently amended) M ethod of any o f claimo 4 — 1 - 4, c: h a 
^ actori - godin that The method of claim Ajyherein 

the method fur ther c omprises es tablishi ng the : key 

distribution for the secure connections is octablished by 
establishing an IKE protocol translation table, and using 
the translation table to modify IP addresses and cookie 
values of IKE packets in the intermediate computer. 

16. (Currently amended) Methed-ei^-ela Am 15, ^ characi e-g 
i z c d in th^t The method of claim 15 wherein the method 
fa rther comprises establishing the key exchange 
distribution Ao cctablich ed: by 

generating an initiator cookie and sending a zero responder 
cookie to the second computer, 

g?jnerating a responder cookie in the second computer, 
establishing a mapping between IP addresses and IKE cookie 
vcilues in the intermediate computer, and 

u«ing the translation table to modify IKE packets in f [Light 
by modifying the external IP addresses and possibly IKE 
cookies of the IKE packets. 

i 

17. (Currently amended) Method of claim l5or1fivcha^a e 
tcri:--'^in ^^-^-^ The met hod of claim 15 wherein the 
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method further comprises modifying the modified . IKE 
protocol between the first computer and the intermediate 
computer in modified by transmitting the IKE keys from | the 
fii'St computer to the intermediate computer in order to 
decrypt and iRG^ ificat e modify IKE packets, ; 

18. (Currently amended) Mefebo€^-&^ ^laim 15 or 16, ah a;r ~a: 
c tcri::cd in fhr\^ The method of claim 15 wherein i the 
method further comprises carrying out in the modified; IKE 
prcjtocol between the first computer and the intermediLate 
computer the modification of the IKE packets in don e byj the 
first computer with the intermediate computer requesting 
such modi ficat ions - 

19. (Currently amended) Me^ho4--e^-^ aim 17, charactior 
i z c d in that Th e method of claim 17 wherein the method 
fu rther comprises defin ing the address is defined so jthat 
ths first computer is identified for the second computejr by 
ths intermediate computer by means of an IP address tjaken 
from a pool of user IP addresses when forming i the 
translation table. 

20. (Currently amended) Me%bo d of any of claims 1 1-^-^-43^ 

^^^^ t c r i n e d in t h n t Th e method of claim 1 wherein 
the^nethod^urt her comprises _sending the secure message 

by; using an IPSec transport mode* ; 

21 . (Currently amended) tJothod of any of claimc 1 — 4 9, c h ^ 
ractcriPi^'i^^ The ^ethod of claim 1 wh erein 

the method further co mprise s send ing the secure message is 
by using an IPSec tunnel mode. 

22. (Currently amended) g dlocommunication A teleco mmunication 

mitwork for secure forwarding of messages, comprising:. ; 
at least a first computer, a second computer and an 

I 
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intermediate computer, 

ch-grQCtoriEod — in th a % r 
the first and the second computers have — moans — to perfor m 
having means for performing an IPSec processing, and 
the intermediate computer have having translation tables to 
perform IPSec and IKE translation. 

23- (Currently amended) Network o£ g laim 22, char act o 

^ i z c d 3^ that The telecommunication network of claim 

22 wherein the translation table for IPSec translation 
cof ^ricoe has IP addresses of the intermediate computer to 
be matched with IP addresses of the second computer. 

24. (Currently amended) jte twork of claim 22/ c -^a^^a-^- a c! t -e 
r i z c d in thnt Th e telecommunication network of cilaim 
22 wherei n the translation tables for IKE translation 
consists of two partitions, one for the communicaition 
between the first computer and the intermediate compjuter 
and another for the communication between the intermediate 
computer and the second computer - 

25. (Currently amended) Network of claim 24, -e-h-a^- r a c t o 

r ± z ^ -fB: in that T he telecommunication network of clai m 

24 where in both partitions of the mapping table forj IKE 
translation contains translation fields for a source IP 
address, a destination IP address, initiator and respOnder 
cookies between respective computers. I 



26- (Currently amended) Network of any of claimc 22 25/ g -^ 

g rac tcrinrfi in that The telec ommunication 

ne ^twork of ^laim 22 wherei n there is another translation 
teible for IKE translation containing fields for matching a 
given user to a given second computer- 
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